Here are two related extensions, one each for Service Providers and Consumers. They permit implementors to use popular HTTP software to encode things. Technically, OAuth core doesn't allow this: it requires a very specific encoding which is similar but not identical to what popular software does.